Package winappdbg :: Package win32 :: Module peb_teb :: Class _PEB_XP_64
[hide private]
[frames] | no frames]

Class _PEB_XP_64

source code


Instance Methods [hide private]

Inherited from _ctypes.Structure: __init__, __new__

Inherited from unreachable._CData: __ctypes_from_outparam__, __hash__, __reduce__, __setstate__

Inherited from object: __delattr__, __format__, __getattribute__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  _pack_ = 8
  _fields_ = [('InheritedAddressSpace', <class 'ctypes.c_ubyte'>...
  ActivationContextData = <Field type=c_void_p, ofs=632, size=4>
  AnsiCodePageData = <Field type=c_void_p, ofs=88, size=4>
  AppCompatFlags = <Field type=c_ulonglong, ofs=600, size=8>
  AppCompatFlagsUser = <Field type=c_ulonglong, ofs=608, size=8>
  AppCompatInfo = <Field type=c_void_p, ofs=620, size=4>
  AtlThunkSListPtr = <Field type=c_void_p, ofs=32, size=4>
  BeingDebugged = <Field type=c_ubyte, ofs=2, size=1>
  BitField = <Field type=c_ubyte, ofs=3, size=1>
  CSDVersion = <Field type=UNICODE_STRING, ofs=624, size=8>
  CriticalSectionTimeout = <Field type=c_longlong, ofs=112, size=8>
  EnvironmentUpdateCount = <Field type=c_ulong, ofs=40, size=4>
  FastPebLock = <Field type=c_void_p, ofs=28, size=4>
  FlsBitmap = <Field type=c_void_p, ofs=668, size=4>
  FlsBitmapBits = <Field type=c_ulong_Array_4, ofs=672, size=16>
  FlsCallback = <Field type=c_void_p, ofs=656, size=4>
  FlsHighIndex = <Field type=c_ulong, ofs=688, size=4>
  FlsListHead = <Field type=LIST_ENTRY, ofs=660, size=8>
  FreeList = <Field type=c_void_p, ofs=56, size=4>
  GdiDCAttributeList = <Field type=c_ulong, ofs=172, size=4>
  GdiHandleBuffer = <Field type=c_ulong_Array_60, ofs=216, size=...
  GdiSharedHandleTable = <Field type=c_void_p, ofs=164, size=4>
  HeapDeCommitFreeBlockThreshold = <Field type=c_ulonglong, ofs=...
  HeapDeCommitTotalFreeThreshold = <Field type=c_ulonglong, ofs=...
  HeapSegmentCommit = <Field type=c_ulonglong, ofs=128, size=8>
  HeapSegmentReserve = <Field type=c_ulonglong, ofs=120, size=8>
  ImageBaseAddress = <Field type=c_void_p, ofs=8, size=4>
  ImageProcessAffinityMask = <Field type=c_ulonglong, ofs=208, s...
  ImageSubsystem = <Field type=c_ulong, ofs=196, size=4>
  ImageSubsystemMajorVersion = <Field type=c_ulong, ofs=200, siz...
  ImageSubsystemMinorVersion = <Field type=c_ulong, ofs=204, siz...
  InheritedAddressSpace = <Field type=c_ubyte, ofs=0, size=1>
  KernelCallbackTable = <Field type=c_void_p, ofs=44, size=4>
  Ldr = <Field type=c_void_p, ofs=12, size=4>
  LoaderLock = <Field type=c_void_p, ofs=176, size=4>
  MaximumNumberOfHeaps = <Field type=c_ulong, ofs=156, size=4>
  MinimumStackCommit = <Field type=c_ulonglong, ofs=648, size=8>
  Mutant = <Field type=c_void_p, ofs=4, size=4>
  NtGlobalFlag = <Field type=c_ulong, ofs=104, size=4>
  NumberOfHeaps = <Field type=c_ulong, ofs=152, size=4>
  NumberOfProcessors = <Field type=c_ulong, ofs=100, size=4>
  OSBuildNumber = <Field type=c_ushort, ofs=188, size=2>
  OSCSDVersion = <Field type=c_ushort, ofs=190, size=2>
  OSMajorVersion = <Field type=c_ulong, ofs=180, size=4>
  OSMinorVersion = <Field type=c_ulong, ofs=184, size=4>
  OSPlatformId = <Field type=c_ulong, ofs=192, size=4>
  OemCodePageData = <Field type=c_void_p, ofs=92, size=4>
  PostProcessInitRoutine = <Field type=c_void_p, ofs=456, size=4>
  ProcessAssemblyStorageMap = <Field type=c_void_p, ofs=636, siz...
  ProcessHeap = <Field type=c_void_p, ofs=24, size=4>
  ProcessHeaps = <Field type=c_void_p, ofs=160, size=4>
  ProcessParameters = <Field type=c_void_p, ofs=16, size=4>
  ProcessStarterHelper = <Field type=c_void_p, ofs=168, size=4>
  ReadImageFileExecOptions = <Field type=c_ubyte, ofs=1, size=1>
  ReadOnlySharedMemoryBase = <Field type=c_void_p, ofs=76, size=4>
  ReadOnlySharedMemoryHeap = <Field type=c_void_p, ofs=80, size=4>
  ReadOnlyStaticServerData = <Field type=c_void_p, ofs=84, size=4>
  SessionId = <Field type=c_ulong, ofs=592, size=4>
  SparePtr2 = <Field type=c_void_p, ofs=36, size=4>
  SpareUlong = <Field type=c_ulong, ofs=52, size=4>
  SubSystemData = <Field type=c_void_p, ofs=20, size=4>
  SystemAssemblyStorageMap = <Field type=c_void_p, ofs=644, size=4>
  SystemDefaultActivationContextData = <Field type=c_void_p, ofs...
  SystemReserved = <Field type=c_ulong, ofs=48, size=4>
  TlsBitmap = <Field type=c_void_p, ofs=64, size=4>
  TlsBitmapBits = <Field type=c_ulong_Array_2, ofs=68, size=8>
  TlsExpansionBitmap = <Field type=c_void_p, ofs=460, size=4>
  TlsExpansionBitmapBits = <Field type=c_ulong_Array_32, ofs=464...
  TlsExpansionCounter = <Field type=c_ulong, ofs=60, size=4>
  UnicodeCaseTableData = <Field type=c_void_p, ofs=96, size=4>
  pShimData = <Field type=c_void_p, ofs=616, size=4>
Properties [hide private]

Inherited from unreachable._CData: _b_base_, _b_needsfree_

Inherited from unreachable._CData (private): _objects

Inherited from object: __class__

Class Variable Details [hide private]

_fields_

Value:
[('InheritedAddressSpace', <class 'ctypes.c_ubyte'>),
 ('ReadImageFileExecOptions', <class 'ctypes.c_ubyte'>),
 ('BeingDebugged', <class 'ctypes.c_ubyte'>),
 ('BitField', <class 'ctypes.c_ubyte'>),
 ('Mutant', <class 'ctypes.c_void_p'>),
 ('ImageBaseAddress', <class 'ctypes.c_void_p'>),
 ('Ldr', <class 'ctypes.c_void_p'>),
 ('ProcessParameters', <class 'ctypes.c_void_p'>),
...

GdiHandleBuffer

Value:
<Field type=c_ulong_Array_60, ofs=216, size=240>

HeapDeCommitFreeBlockThreshold

Value:
<Field type=c_ulonglong, ofs=144, size=8>

HeapDeCommitTotalFreeThreshold

Value:
<Field type=c_ulonglong, ofs=136, size=8>

ImageProcessAffinityMask

Value:
<Field type=c_ulonglong, ofs=208, size=8>

ImageSubsystemMajorVersion

Value:
<Field type=c_ulong, ofs=200, size=4>

ImageSubsystemMinorVersion

Value:
<Field type=c_ulong, ofs=204, size=4>

ProcessAssemblyStorageMap

Value:
<Field type=c_void_p, ofs=636, size=4>

SystemDefaultActivationContextData

Value:
<Field type=c_void_p, ofs=640, size=4>

TlsExpansionBitmapBits

Value:
<Field type=c_ulong_Array_32, ofs=464, size=128>